Security Engineer

The role

You will protect Gamma's platform, infrastructure, and data by building security tooling and automation. You will design security controls, conduct architecture reviews, and lead vulnerability management.

What you will do

• Design and implement security controls across Gamma's AWS infrastructure and application layer
• Build security tooling and automation to detect, prevent, and respond to threats at scale
• Conduct security reviews of architecture designs, code, and infrastructure changes
• Lead vulnerability management, coordinate bug bounty responses, and drive remediation priorities
• Develop and maintain security monitoring, alerting, and incident response capabilities
• Partner with engineering teams on secure coding practices and threat modeling
• Deploy AI-assisted vulnerability scanning across codebase and infrastructure
• Build automated triage workflows using AI to deduplicate findings and draft remediation tickets
• Drive adoption of memory-safe languages and secure-by-design practices

Required qualifications

• 5+ years of software engineering experience
• 2–3 years focused on security engineering or application security
• Strong hands-on experience securing AWS environments, including IAM, VPC, security groups, CloudTrail, and GuardDuty
• Proficiency in at least one backend language
• Experience building security tools
• Deep understanding of web application security including OWASP Top 10, common vulnerability classes, and authentication/authorization patterns
• Experience implementing security controls in CI/CD pipelines and infrastructure-as-code (Terraform, CloudFormation)
• Clear communicator who works well embedded with product engineering teams
• Background in penetration testing, offensive security, and SIEM/log analysis

Nice to have

• Experience at a high-growth SaaS startup navigating rapid scaling and compliance
• Familiarity with AI/ML security tooling, including using frontier models for code scanning, automated pentesting, or threat detection
• Experience building zero trust architecture or identity-aware access controls (FIDO2, short-lived tokens, hardware-bound credentials)
• Knowledge of supply chain security frameworks like SLSA, OpenSSF Scorecard, or SBOM tooling
• Python, TypeScript/Node.js, or Go preferred

Benefits

• benefits
• equity

About the company

Gamma is building security posture for the age of AI-driven offense and defense. The company has a strong in-office culture in San Francisco.